Dockerfile

FROM docker.io/alpine:3.24.1

LABEL maintainer="Adrien Ferrand <ferrand.ad@gmail.com>"
LABEL org.opencontainers.image.source="https://github.com/adferrand/docker-backuppc"
LABEL org.opencontainers.image.description="BackupPC on Alpine Linux with rsync-bpc, XS, and msmtp"

ARG BACKUPPC_VERSION="4.4.0"
ARG BACKUPPC_XS_VERSION="0.62"
ARG RSYNC_BPC_COMMIT="1ad3f70"

ENV BACKUPPC_VERSION="${BACKUPPC_VERSION}"
ENV BACKUPPC_XS_VERSION="${BACKUPPC_XS_VERSION}"
ENV RSYNC_BPC_COMMIT="${RSYNC_BPC_COMMIT}"

# Install backuppc runtime dependencies
# hadolint ignore=DL3018,DL3003
RUN apk --no-cache --update add \
        rsync tar bash shadow ca-certificates \
        supervisor \
        # TODO: Remove patch when appliance of datadumper.patch is not needed anymore
        patch \
        perl perl-archive-zip perl-xml-rss perl-cgi perl-file-listing perl-json-xs \
        expat samba-client iputils openssh openssl rrdtool ttf-dejavu \
        msmtp lighttpd lighttpd-mod_auth apache2-utils tzdata libstdc++ libgomp \
        gzip pigz \
 && apk --no-cache --update -X http://dl-cdn.alpinelinux.org/alpine/edge/community add par2cmdline \
# Install backuppc build dependencies
 && apk --no-cache --update --virtual build-dependencies add \
        gcc g++ autoconf automake make git perl-dev acl-dev curl \
# Compile and install BackupPC:XS
 && git clone https://github.com/backuppc/backuppc-xs.git /root/backuppc-xs --branch "$BACKUPPC_XS_VERSION" \
 && cd /root/backuppc-xs \
 && perl Makefile.PL && make -j"$(nproc)" && make test && make install \
# Compile and install Rsync (BPC version), pinned to a specific commit on master
# that includes GCC 14/15 build fixes (latest 3.1.3.0 release tag does not build
# on modern toolchains and upstream has not cut a new release).
# Disable optional features added on master after 3.1.3.0 (md2man, openssl crypto,
# xxhash, zstd, lz4) — BackupPC does not use them and they pull extra build deps.
 && git clone https://github.com/backuppc/rsync-bpc.git /root/rsync-bpc \
 && cd /root/rsync-bpc && git checkout "$RSYNC_BPC_COMMIT" \
 && ./configure --disable-md2man --disable-openssl --disable-xxhash --disable-zstd --disable-lz4 \
 && make reconfigure && make -j"$(nproc)" && make install \
# Configure MSMTP for mail delivery (initially sendmail is a sym link to busybox)
 && rm -f /usr/sbin/sendmail \
 && ln -s /usr/bin/msmtp /usr/sbin/sendmail \
# Disable strict host key checking
 && sed -i -e 's/^# Host \*/Host */g' /etc/ssh/ssh_config \
 && sed -i -e 's/^#   StrictHostKeyChecking ask/    StrictHostKeyChecking no/g' /etc/ssh/ssh_config \
# Get BackupPC, it will be installed at runtime to allow dynamic upgrade of existing config/pool
 && curl -o "/root/BackupPC-$BACKUPPC_VERSION.tar.gz" -L "https://github.com/backuppc/backuppc/releases/download/$BACKUPPC_VERSION/BackupPC-$BACKUPPC_VERSION.tar.gz" \
# Prepare backuppc home
 && mkdir -p /home/backuppc && cd /home/backuppc \
# Mark the docker as not run yet, to allow entrypoint to do its stuff
 && touch /firstrun \
# Clean
 && rm -rf /root/backuppc-xs /root/rsync-bpc /root/par2cmdline \
 && apk del build-dependencies

COPY files/lighttpd.conf /etc/lighttpd/lighttpd.conf
COPY files/auth.conf /etc/lighttpd/auth.conf
COPY files/auth-ldap.conf /etc/lighttpd/auth-ldap.conf
COPY files/entrypoint.sh /entrypoint.sh
COPY files/supervisord.conf /etc/supervisord.conf
# TODO: Remove these patches when BackupPC 4.4.1 is released and shipped in this image.
COPY files/datadumper.patch /datadumper.patch
COPY files/xss-cgi-view.patch /xss-cgi-view.patch

EXPOSE 8080

WORKDIR /home/backuppc

VOLUME ["/etc/backuppc", "/home/backuppc", "/data/backuppc"]

ENTRYPOINT ["/entrypoint.sh"]

CMD ["/usr/bin/supervisord", "-c", "/etc/supervisord.conf"]